Pull Request Updater GitHub Action

Abandoned

tzkhan/pr-update-action · MIT

GitHub Action that updates a pull request with information extracted from branch name

★ 85 starsLast commit 5 years agoLatest v2

/ 100

Security signals

OpenSSF Scorecard3.4 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: tzkhan/pr-update-action@bbd4c9395df8a9c4ef075b8b7fe29f2ca76cdca9 # v2

Mutable tags like v2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: tzkhan/pr-update-action@bbd4c9395df8a9c4ef075b8b7fe29f2ca76cdca9 # v2

Score breakdown

Security (35%)40

Popularity (20%)35

Maintenance (30%)4

Reliability (15%)90